Option to protect against xxs?

dev support
1

In ColdFusion you could tick in the administrator an option to protect against xxs, that option isn’t in Lucee that I can see. Does it exist?

CloudLinux v7.9.0
Lucee 5.3.7.47
Apache/2.4.53

2

image
image978×581 79.1 KB

it’s not super robust, you still need to use the encodeForHtml etc

3 Likes
3

Got it thanks

1 Like
4

Got it @Zackster Thanks…

5

And depending on the output you are using and where you are using it, use the respective alternatives like encodeForHTMLAttribute(), encodeForJavascript(), etc. Sometimes you need to use both in combination, like I’ve posted at the end of this stackoverflow answer about escaping output

6

The acronym for Cross-Site Scripting is XSS which I mention to improve search results for this topic. :slight_smile:

1 Like